Static task
static1
Behavioral task
behavioral1
Sample
bda137f856d2555ad90b2a7e78e2a9a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bda137f856d2555ad90b2a7e78e2a9a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bda137f856d2555ad90b2a7e78e2a9a5_JaffaCakes118
-
Size
31KB
-
MD5
bda137f856d2555ad90b2a7e78e2a9a5
-
SHA1
602a6ddc837a1def8610267cae7c3aae4c89b067
-
SHA256
2202ffe80f5ab68d6fcda28397664ff599656a4b09263188dfedd2a539f2feb0
-
SHA512
91de6a6782cd6ee4dc0c8a3289ae8508f4ee1d4d125fa700787c7fd1d9ae6afc26200ff7771c16e5e5c1576d0c9e24c9fd59b0d680e3181460317c98b21d932b
-
SSDEEP
768:npShERejteIZzr9bHBHWv0J2q26/Kfv5p6riVd/:np5s4EzxHBH60J/Kfvv6rid
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bda137f856d2555ad90b2a7e78e2a9a5_JaffaCakes118
Files
-
bda137f856d2555ad90b2a7e78e2a9a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE